The vulnerability of the trusted loading module in Intel microprogrammed system BIOS allows a hacker to enhance their privileges.

🗓️ 29 Jun 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 9 Views

The Intel BIOS trusted loading module vulnerability enables privilege escalation due to poor input data checking.

Reporter	Title	Published	Views	Family All 20
CNNVD	Intel BIOS firmware 输入验证错误漏洞	11 May 202200:00	–	cnnvd
CVE	CVE-2021-0159	12 May 202216:36	–	cve
Cvelist	CVE-2021-0159	12 May 202216:36	–	cvelist
EUVD	EUVD-2021-2778	3 Oct 202520:07	–	euvd
F5 Networks	K13070025: Intel BIOS vulnerabiilties CVE-2021-0159, CVE-2021-0188, CVE-2021-0189, CVE-2021-33103, and CVE-2021-33122	21 Feb 202319:55	–	f5
HPE Security Bulletins	HPESBHF04286 rev.4 - Certain HPE ProLiant BL/DL/ML/XL/MicroServer and Apollo Servers Using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	10 May 202200:00	–	hpe
HPE Security Bulletins	HPESBHF04292 rev.3 - Certain HPE Synergy Servers using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	10 May 202200:00	–	hpe
HPE Security Bulletins	HPESBHF04296 rev.2 - Certain HPE ProLiant DX Servers Using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	10 May 202200:00	–	hpe
HPE Security Bulletins	HPESBHF04303 rev.1 - Certain HPE Moonshot/Edgeline Servers using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	27 Jun 202200:00	–	hpe
HPE Security Bulletins	HPESBNS04337 rev.1 - Certain HPE NonStop Products Using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	28 Sep 202200:00	–	hpe

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-0159
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html
vuldb	www.vuldb.com/ru/
web	www.web.nvd.nist.gov/view/vuln/detail
security-center	www.security-center.intel.com/advisory.aspx

29 Jun 2022 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 25.7

CVSS 37.4

EPSS0.00259

intel bios vulnerability trusted loading module input data checking privilege escalation